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SPECIFICATION 

Personal identification device 

5 The present invention relates to a personal identifica- 
tion device which can enable an individual to provide 
proof of identity or enable validation of an indi- 
vidual's right of access to various facilities, which 
may additionally incorporate storage means for a 

10 variety of personal information about the individual. 
A variety of different types of identification devices 
are known, some of these being in the form of sec- 
urity passes, wherein an access code is stored on a 
card, and in the form of a magnetic strip or a combin- 

1 5 ation of magnetized dots or in the form of optical 
character readable print. Such cards may addition- 
ally include one or more photographs of the holder 
and the holder's name, signature, status etc. Further, 
credit cards, charge cards orcash cards are known 

20 which enable a user to access a bank computerin 
orderto withdraw money from their current account 
or to obtain cash advances from a credit account, or 
to obtain goods and services from retailers or re- 
staurants orthe like. Suchcardsare normally issued 

25 by banks and other financial institutionsto allow 
theircustomers access to a range of services prov- 
ided forthem. In addition, independent credit card 
companies also exist and a variety of large chain 
stores and mail order stores have their own credit 

30 card schemes, so that there is a potential for an indi- 
vidual to have dozens of different cards available to 
him. With many of these cards, particularly those 
issued by banks, a customer can obtain a personal 
identification number (p. i.n. code) foruse with a part- 

35 icular banks card for use when obtaining access to 
his own account or accounts at the bank or for mak- 
ing cash withdrawals or other financial transactions. 
In view of the large number of cards which utilise 
such a p.i.n^code, the user may have to remember 

40 several different p. i.n. codes for different accounts 
which he holds. The p. i.n. code is essential with such 
devices to assure security of access to an individual 
user's account, since the card and correct p.i.n. 
number are required before thecard can be utilised 

45 in accessing the information via a cash dispenser or 
service till. 

It is a disadvantage of the present type of devices 
thateach company issuing acard utilises theirown 
coded information on the card for identifying the ac- 

50 count of the user, which is then confirmed by the user 
by input of the correct p.i.n. code, so that existing 
cards are not fully interchangeable with cards of an- 
othersupplierand because of the large numbers of 
cards which may be involved, a user may have to 

55 attempt to remember several p.i.n. numbers forthe 
variouscards held. The result of this problem isoften 
that the user of the card, despite warnings from the 
company issuing the card, will often write down the 
p.i.n. numberon something carried with the card, so 

60 that in the event the number is forgotten the number 
can be looked up readily. Unfortunately, this does 
cause security problems in that, if the card is stolen, it 
may bethatthe security number will also have been 
stolen, thereby giving the thief immediate access to 
% he card holder's personal account. 



In order to overcome such a problem, it would be 
preferable to attemptto provide a single device, 
which is capable of being utilised by all users and 
which contains universally acceptable information 

70 about the user for enabling correct identification of 
the user and which at most requires the user to re- 
membera single p.i.n. number but may alternatively 
utilise another time of personal information, for ex- 
ample, a unique fingerprint or voice print of the user, 

75 in orderto establish identity for access to secure in- 
formation or accounts, utilising existing terminal 
equipment with suitable minor modifications where 
necessary. 

It is the aim of the present invention to seek to pro- 
80 vide a personal identity device which may suitably be 
used as or incorporated in an item of jewellery, or 
alternatively may be incorporated in a wristwatch, 
pocket-watch or calculator, according to the user's 
preference, and which is capable of enabling es- 
85 tablishment of the identity of the user. 

According to the present invention there is prov- 
ided an electronic identity device including means 
for enabling output of identity information upon ac- 
tivation thereof. 
90 Preferably, the output of identity information is 
time-dependent and said means comprises a multi- 
number time-dependent code generator syn- 
chronised with an identical, remote code generator 
capable of confirming the identity of the device and 
95 the user thereof in a secure system, upon input of a 
personal identity access code or a personal char- 
acteristicof the user. The personal identity access 
code may be a conventional p.i.n. number which 
may be input into an electronic console or may com- 

100 prise a personal characteristic of the user, e.g. a fin- 
gerprint or voice print. 

Further preferably, the device may also include 
stored therein various non-secure items of informa- 
tion such as the specific medical history of the user, 

105 giving details of any special medical requirements in 
an emergency, i.e. blood group, allergies etc., which 
may be suitably accessed in an emergency. The de- 
vice may also include other personal information 
such as driving licence number, insurance certificate 

110 number and insurance details of the owner's vehicle 
etc., orthe passport numberandan image of the user 
which may either be displayed on the device itself or 
be transmitted via a suitable linkto a consolefordis- 
play of such information as required, e.g. for a 

115 customsor immigration official. 

The device of the present invention may suitably 
be incorporated in an item of jewellery such as a 
wristwatch, pendantor bracelet orthe likeorin a 
pocket electronic calculatoror travel alarm clockand 

120 may include its own display or be connectable to or 
capable of communicating with another device such 
as a compatible terminal in a bank or other establish- 
ment for the display of information. The device may 
include long-life batteries or may utilise solar cells or 

125 a combination of these to prolong useful life thereof 
if required, but the device is preferably provided as a 
sealed secure unit having a predetermined life, so 
that secure information may only be input to the de- 
vice initially and may not subsequently be altered or 

130 updated, although separate means may be provided . 
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for input and update of non-secure information, as 
referred to above. 

The device of the present invention provides a use- 
ful identity device, which is less likely to be lostor 
5 misplaced than identity cards or bracelets or credit 
cards or the like and which is capable of storing a 
variety of information, including emergency inform- 
ation about the wearer in a single device, which may 
be used fora variety of purposes, including entry ac- 

10 cess to a vehicle security system or home security 
system belonging to the user. The device could also 
include or activate a small transmitterfor the output 
of a signal for operating equipment remotelyfrom 
the device,e.g. for disarming a security system orop- 

1 5 cning a security door or the like or for communicat- 
ing directly with a radio telephone network to enable 
transactions to be performed at a variety of locations, 
for example, by suitable interfacing with a cellular 
telephone device. Similarly, such devices may be 

20 used additionally as a paging device to enable the 
wearer to be contacted whatever his location may be 
again utilising the cellulartelephone network. 

Depending upon the intended usage of device, 
such may be provided with, or connectable to, an 

25 appropriate keyboard module to enable such to be 
used as a datastorage means or possibly a display 
for anotherdevice such as a calculator or even con- 
nectable to a portable computer. 
The device may include a tamper-proof arrange- 

30 ment which would act to prevent access to the secure 
identityinformationorunauthorised output of in- 
formation, other than emergency information which 
may be required. 
The presentinvention will now be described 

35 further, by way of example, with reference to the ac- 
companying drawings, in which:- 

Figure 7 illustrates schematically, a module ac- 
cording to the present invention; 
Figure 2 illustrates a possible example of the 

40 module of Figure 1 in use with a verification console; 
Figure 3 illustrates a possible construction of a 
module according to the present invention and utilis- 
ing a sensitive matrix for scanning a fingerprint app- 
lied thereto; 

45 Figure 4\s a block diagram of a possible circuit for 
performing the function of the present invention 
when utilising a fingerprint as identification means; 

Figure 5 illustrates the internal program of a time 
dependent code generating device incorporated in a 

50 device of the present invention; and 

F/^ure 6 illustrates the corresponding program 
steps in a remote device capable of being linked with 
a module utilising the program set out in Figure 5. 
Referring firstly to Figure 1 , an example of a per- 

55 sonal data module device 1 0 is shown schematically 
illustrating the manner in which the device 1 0 may be 
loaded with information upon commissioning 
thereof for a particular user, including personal ac- 
count information and details for establishing the 

60 identity of the user, including a persona! char- 
acteristic or a p.i.n. code. In addition, the user may be 
allowed to input personal data, either by supplying 
such information to the institution issuing the device 
10, or via a console supplied with the device, or on a 

65 keypad incorporated in, orabis to communicate 



with, the device. 

The relevant information stored in the device 1 0 
can be stored in a central computer unit of the institu- 
tion issuing the device so that, at a subsequent date, 
70 when the device is activated and is in communication 
with a peripheral connected to the institution's cen- 
tral computer of the institution, e.g. a bank, the user 
is able to access personal account details etc. and up- 
date and make requests of the central computer. 
75 Alternatively, the device lOcouldsimplycommuni- 
cate with a console, which may be manned, such 
console being capable of producing a visual display 
20, as shown in Figure 2, which can display to the 
operatorpersonal information about the holderof 
80 the module in order to establish the identity thereof, 
for example the signature, photograph, orother per- 
sonal information about the user which the operator 
can utilise to verify his identity. 
As can be appreciated from the above, there are a 
85 variety of applications in which the module can be 
used whether used by a bank teller, or retailer deal- 
ing directly with the customer, or via an automatictill 
orcash dispenserorthe like. 
As referred to above, the device is preferably incor- 
90 porated in a watch, since such may already contain 
much of the circuitry necessary for performing the 
functions of the device, namely a microprocessor 
and associated program storage and data storage 
means and a liquid crystal display. Relatively com- 
95 plex watches are available which include storagefa- 
cilities and indeed which are connectable to compu- 
terdevices to enable uploading and downloading of 
information therefrom and may act as a display de- 
vice fora miniature computer or calculator. As such 
100 therefore, many of the functions of the watch as en- 
visaged by the present invention can be readily com- 
bined from existing devices, but additionally inclu- 
des a secure personal p.i.n. code, known only to the 
user, or personal characteristics of the user, forex- 
1 05 ample, the characteristics of the fingerprint or voice 
print of the user which can be used to activate the 
secure operation of the device, when seeking access 
to sensitive installations, not only including personal 
bank information relating to the user, but also for 
110 general security purposes, if desired. Once correctly 
actuated by such secure means, the device can then 
be utilised by such secure means, the device can then 
be utilised to enable access to such secure installa- 
tion or equipment by transmission of a code signal 
115 unique to the device and recognisable by the security 
equipment controlling access to such information or 
installation, such secure code being able to be trans- 
mitted directly thereto by any of a variety of means, 
including an ultrasonic or infrared signal or a direct 
120 electrical link to the equipment or by a short range 
radio transmission. As an alternative to incorporat- 
ing such features in the watch itself, the means for 
inputting the personal identity number or the voice 
orfingerprint could be contained within the console 
125 of the equipment with which the device is com- 
municating such that on actuation of the device by a 
non-secure means, the installation being soughtto 
be accessed identifies the specific watch in question 
and awaits a confirmation by means of the input of a .' 
130 personal code intothe machine itself orbytheapplic- 
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ation of a recognisable thumb print orfingerprint or 
upon recognition of the required voice matching the 
voice print stored by the computer. As such, there- 
fore the device itself requires very few component 
5 parts, the bulk of the recognition system being con- 
tained within the console, rather than the wrist watch 
thereby enabling simplification of the construction of 
the device. 

Referring now to Figure 3, this illustrates in an ex- 
1 0 ploded view a possible construction of a wrist watch 
i n which the electronic circuitry is contained on a PCB 
30 containing the necessary electronic circuitry in 
micro-electronic form, including the normal watch or 
clock function devices together with micro- 
1 5 processor and memory storage chips 31 and devices 
32 for enabling communications, either by utilising 
an on-chip transmitter and/or receiver 33 and pos- 
sibly a modem 34, enabling the device to be utilised 
in communication with other devices down a cable 
20 connector, or vai an antenna which is preferably 
formed by the bracelet of the watch. In addition, a 
transparent matrix 36 overlies an LCD display 37 in 
order to detect the conformation of a fingerprint ap- 
plied thereto. Suitable buttons 35 may be provided 
25 on the watch case to enable actuation of the device 
and for control of the various clockfunctions in order 
to enable other functions, which may be required of 
the watch, to be performed. 

Referring now to Figure 4, this is a block circuit dia- 
30 gram illustrating the manner in which the com- 
ponents can be connected together to perform the 
function as described above in the embodiment of a 
watch having a pressure sensitive matrix for detect- 
ing afingerprint applied thereto. In the arrangement 
35 shown in Figure 4, the device is controlled by a mic- 
roprocessor 40 with associated fixed or read-only 
memory 41 for storing secure details including data 
relating to the configuration of the fingerprint of the 
userforcomparison with theconfiguration of the fin- 
40 gerprint applied to the matrix upon actuation of the 
device. In addition, a variable or updateable memory 
42 can additionally be provided to store information 
which is likely to be changed from time to time, for 
example any personal information. The micro- 
45 processor 40 also controls the normal clock functions 
of the watch, details of which are not shown, but are 
standard in the art, as well as controlling enabling of 
the display 43 or any of the various interfaces 44 or 
radio transmitter and receiver 45 according to which 
50 are provided in the device. For example, the display 
43, in addition to being able to display the normal 
time and various clockfunctions as per a standard 
watch, such can store other i.d. information or per- 
sonal details, according to the purposes to which the 
55 device is to be applied, including any messages 
which may have been received by the device if such 
is used in a radio reception mode, for example for 
radio paging or the like via thecellulartelephone net- 
work. Alternatively, the display 43 of the watch may 
60 only display the clock functions, the security aspects 
of the device being achieved by transmission of app- 
ropriate coded information to a console via a short 
range ultrasonic or infrared or radio transmission or 

via a direct local connection by a short lead to a de- 
65 vice with which it is to commu nicate. The particular 



manner in which the device would function in prac- 
tice would be determined entirely by the intended 
use and the desired features to be incorporated. For 
the purpose of direct connection or facilitating radio 
70 transmissions or ultrasonic infrared signals to be 
transmitted,then appropriate interfaces and re- 
ceivers are supplied again controlled by the micro- 
processor40, as required. 

It is considered that in one possible embodiment, 
75 as far as the user is concerned, the device performs 
on ly normal functions of a watch or other device in 
which the device of the present invention is incor- 
porated, with all the necessary communication with 
security systems being performed in a manner not 
80 apparent to the user, so as to avoid complicating the 
device, the user only being required to make ap- 
propriate input to a console with which the device is 
to communicate, in which case the various more 
complex pieces of apparatus which may be required 
85 for use with the device can be incorporated in the 
console. For example, upon actuation of the device, a 
signal is transmitted to the console to identify the 
user and then confirmation of the identity of the user 
is input by the user directly into the console, i.e. 
90 eitherby applying his fingerprintto a designated part 
of the console, so that such may be scanned, or by 
inputting a personal identity number, orfor example 
by speaking into the console or by writing his sig- 
nature on a sensitive portion of the console, or by any 
95 suitable other alternative means, which may be con- 
sidered to be a suitable unique personal char- 
acteristic to confirm identity of the user before access 
is permitted to the facilities of the console or into a 
secure location. 
1 00 As it will be appreciated, all of such facilities may 
be'provided on the device itself or be provided on a 
further device connectable to the device of the inven- 
tion. A further alternative which is envisaged is the 
use of a video card or disc in which the information is 
1 05 permanently stored thereon and which is associated 
with the device of the invention to confirm identity 
and to minimize the amount of storage required in 
the device itself, such video disc or card being incor- 
porated in the device, if necessary, possibly forming 
110 part of the casing or accommodated therein. 

Referring now to Figures 5 and 6, these illustrate 
flowdiagrams of a secure method of identifying a de- 
vice according to the present invention, in which a 
matched pair of modules 50, 60 are provided, each 
1 1 5 being constructed from appropriate memory devices 
and being programmed with an identical sequence 
of code numbers, said sequence being generated at 
random. The pair of modules are readily identified 
both in internally and externally to ensure that these 
1 20 are correctly matched when used. One of such mod- 
ules 50 is then incorporated in the device of the pre- 
sent invention and another of such modules 60 is in- 
corporated in a central computer of the institution 
issuing the device. The sequence of numbers in the 
125 modules 50 and 60 constitutes a list in which one of 
said numbers in said list is current for a predermined 
period of time, such that at the same time the two 
numbers in the two modules are identical. Thus, if 
the module 50 contained in the device of the present 
130 invention is interrogated and the number provided , 
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thereby is compared with the number currently in the 
matched module 60 in the central computer, such 
numbers will be identical and the device will beuni- 
quely identified. Since such sequences of numbers 
5 are generated at random for each matched pair of de- 
vices, the likelihood of another similar device pro- 
ducing the same number at the same moment in 
time, although it is statistically possible, would be in- 
fini- 

10 tesimally small. 

Thus, the user of the device, upon actuation 
thereof, could either have the internal code number 
current in the list displayed on his device, or trans- 
mitted directly to the console so that upon input 
1 5 thereof into the console together with other means of 
confirming his identity, for example using a p.i.n. 
number, fingerprint, voice print or other personal 
characteristic, the identity of the user can be con- 
firmed. The moduel 60 in the central computer will 
20 have meantime indicated to the data base of the insti- 
tution the correct identity of the user of the device 
having that code number at that particular moment 
in time allowing for any transmission delays, etc., 
and will have looked for confirmation of the identity 
25 of the user by appropriate input either into the device 
of the useror into a console, such as a cash dispenser 
orservice till before permitting access to thefacilities 
thereof. When correct identification has been con- 
firmed, the number used is deleted from the list in the 
30 code sequence, so that such cannot be used again, 
thereby preventing the possibility of anyone attemp- 
ting to memorise the numberand determiningthe 
cycle time of the device and thereby attempting to 
reuse that number. This feature also provides an in- 
35 built obsolenscence of the device, so that a fresh 
modulecan be issued periodically providing an 
additional degree of control overthe useof such 
modules by the institution. 
The generalised program steps required for per- 
40 formance of the necessary routines internally in the 
device of the present invention and in the central 
computer containing access to the personal account 
information etc. are shown in the flow diagrams of 
Figures 5 and 6. 
45 In addition to the envisaged uses in a bank environ- 
ment otherfinancial institutions could also utilise 
such a system, since many building societies are 
nowoperating cashdispensers and service tills, and 
it may be that such a system could constitute the 
50 basis of an electronic identity card, which can be 
used by the security servicesforunequivocally 
identi- 
fying an individual. In this sense, it is envisaged that 
such may be of particular value in the area of pass- 
55 port control, with the personal information, includ- 
ing a photographic image of an individual, stored in a 
central computer and accessed as required by 
customs officials in order to establish the identity of 
the user of the device, but such arrangements would 
60 require international agreement in order to permit 
widespread use of such a system. 

A furtherapplication into which the device of the 
present invention may be used is in electronic fund 
transfer at point of sale (eftpos), so that any transac- 
65 tion made by the user would involve such a device, 



so that monies could be deducted either from a credit 
account of the user, or directly from a current ac- 
count; access to the users personal account being 
available via a suitable terminal in the retailers pre- 
70 mises. Such an embodiment could lead to an arran- 
gement providing an effectively cashless society, 
which would give considerable central control, 
which might not always be welcomed by the general 
public, over cash flow in the economy, in that such 
75 information would not only be available to the insti- 
tutions providing the use of facilities, but could also 
be made available to tax authorities. This would en- 
able a considerably reduction in "cash only trans- 
actions" and provide a considerable hurdle to the 
80 black economy, at least from the point of view of 
supply of materials and equipment, and such could 
have considerable economic effect. 

Further, with the advent of computers across a 
wide spectrum of society, with a suitable interface, 
85 such a device could also provide the user with access 
to his personal account directly from a home console 
or home computer, providing the user with much 
greater control over his accounts and enabling him 
to perform transactions at home rather than having 
90 to visit a banks premises and having to rely upon the 
issuance of statements, etc, to check the status of his 
account. Therefore, such a device could provide the 
user with considerable benefits and a greater degree 
of flexibility and control over his own personal 
95 affairs. Indeed, the user could use such computer- 
based facilities for purchasing items or booking fa- 
cilities such as theatre tickets etc. from home, having 
the appropriate amounts deducted directly from his 
own personal account similar to the facilities which 
100 already exist via PRESTEL in the U.K. 

As will be appreciated from the above, the device 
of the present invention has considerable advan- 
tages over existing prior art devices and it provides 
fora wide range of alternative services and facilities 
105 to be provided to the user, who will also have greater 
degree of control over his own personal financial 
affairs. 

Whilst the device of the present invention is prefer- 
ably incorporated in a wrist watch, this being an item 

110 which virtually everyone possesses and isoftenthe 
first item put on in the morning and the last item 
taken off at night, and provides the ideal basis for in- 
corporation of the device of the present invention, 
since it already contains manyof thecomponents 

115 necessary for performance of the functions thereof, 
the device could equally be incorporated in any other 
personal item, including a personal calculator an 
item of jewellery according to preference. 

Further, such a device, as envisaged by the inven- 

1 20 tion, may be used with existing credit cards but using 
the device in a watch to display or transmitcoded 
information to be used in conjunction with the in- 
formation on the credit card and p.i.n. number to pro- 
vide a further degree of security over existing arran- 

125 gements. 
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CLAIMS 

1 . An electronic identity device including means 
for enabling output of identity information upon ac- 

5 tivation thereof. 

2. A device as claimed in claim 1 wherein said en- 
abling means includes meansfor receiving and com- 
paring input information with data stored in said de- 
vice and only outputting said identity information 

10 upon a correct match between said input information 
and said stored data being achieved. 

3. A device as claimed in claim Tor 2, in which 
said input information is selected from either a per- 
sonal identity number, or an individual characteristic 

15 of a user r such as a fingerprint, voice print, signature, 
or other unique personal characteristic. 

4. Adevice as claimed in any preceding claim 
wherein said output information is displayed on said 
device. 

20 5. A device as claimed in any preceding claim 
wherein said output information is transmitted via 
ultrasonic, infrared, short range radio transmission, 
or via an electrical connectorto a remote console, in 
orderto enable access to facilities thereof upon con- 

25 firmation of the identity of the user in a secure 
manner, 

6. A device as claimed in claim Bin which the 
identity information is time-dependent and is gener- 
ated in a multi-number, time-dependent code gener- 

30 ator synchronised with an identical, remote code 
generator associated with central data storage 
means, with which communication is possible via a 
console to which access may be sought, so that the 
module in said device is uniquely identified and, 

35 upon confirmation of the identity of the user by 
means of a personal identity number or persona! 
characteristic, access to the console and thus the 
central computer system is enabled. 

7. A devfee as claimed in claim6in which the 
40 time-dependent identity information is either dis- 
played on the device or transmitted directly by said 
device via an infrared, ultrasonic, short range radio 
signal or an electrical signal to a remote console to 
which access is sought in use. 

45 8. The device as claimed in any preceding claim 
wherein said device additionally contains memory 
storage means enabling the storage of personal data 
in a non-secure manner and able to be accessed and 
updated by the user, by a key pad incorporated in the 

50 device orconnectable thereto. 

9. A device as claimed in any preceding claim, 
wherein such is incorporated in a watch, preferably a 
wrist watch. 

10. Asystem for enabling the identification of in- 
55 dividuals, comprising a personal electronic identity 

device including means.enabling output of personal 
identity information for input to a console associated 
with, or directly to, a computer-based system to en* 
able unique identification of the user of the personal 

60 identity device by means of said output information, 
corroborated by the input to said computer of a per- 
sonal identity number or the identification of a per- 
sonal characteristic of the user, to allow access to fac« 
ilties provided by said computer based system. 

65 11. Asystem as claimed in claim 10inwhichthe 



output of identity information istime-dependentand 
each personal identity device incorporates a multi- 
number code generator matched with an identical, 
remote code generator associated with the computer 
70 for uniquely identifying a particular device at a pre- 
cise momentin time. 

12. A system as claimed in claim 10or 11 inwhich 
said device may interface the computerised system 
via remote consoles or via a home computer or a tele- 

75 phone link. 

13. A device as claimed in any preceding claim in 
which a radio paging means is incorporated and 
which may additionally permit full duplex operation 
allowing the reception or transmission of messages 

80 to and from said device. 

14. A device as claimed in any preceding claim in 
which additional devices may be attached thereto in 
orderto access information contained within said de- 
vice or to provide additional storage or data for ac- 

85 cess by said device. 
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